anonymize-doc

Pass

Audited by Gen Agent Trust Hub on Oct 26, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses shell commands in SKILL.md to manage dependencies via pip and install necessary NLP models for spaCy. These operations are transparent and limited to the skill's requirements.
  • [EXTERNAL_DOWNLOADS]: The skill downloads standard open-source Python packages (scrubadub, spacy, faker) and official language models from spaCy's repositories. These are well-known, trusted resources required for the skill's primary function of PII detection.
  • [SAFE]: The code implements industry-standard privacy protections. The anonymize.py script preserves original files and generates audit logs, including warnings to secure mapping files when reversible strategies (pseudonymization/tokenization) are used. It also follows security best practices by recommending the exclusion of audit logs from version control via .gitignore.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 26, 2026, 01:34 PM